[strongSwan] trap-any connection exclude some IPs from rightsubnet block

[Noel Kuntze]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Paul,

> Is it possible to exclude a list of IPs?
Write a passthrough connection for the list of IPs that you want to exclude.

> Is there a configuration that allows me to fail to a non-ipsec connection after a certain timeout period?
As far as I am aware, there is no way to define such a thing.


- -- 

Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJWliE+AAoJEDg5KY9j7GZYvS8P/AzacDGM8Kvn6oLbltI3v+BZ
De+b2d8v4k+RtomB/L2mN1w1Xyi+dm26Oc5Jwwu9mNUi5pDI/84b90jepopfoCk1
7UOev92FWIzUAukokyV0s8qw+/wdfstIdAV3sH6Ef6jiqmAU0ToEtfmjZoWgEoo+
UNeWghKsaaIwH5cEfg71W761AMWX0Wa9bfG+b5cPxKMvS5LJl2MvKK9yGybQdwKM
enoJS69hzeyw2g7qF0mPm2Z4TJ8zARxdoNkSG2Fa0GzYR2VBsg25jYk4wD+7lDm6
KtXjyK2JxY8YYhr8x5cGsvFXYrX/1mqIcMKq9BfjO887JN8JLbE7Ff9G5YiR6Uzv
KX5mhAsYzozZ5hGp1e9QK57lehWgpeKgwA7kT1L+Pva+rR2FqkClSfF7aHc1BoHs
xALdGYK6R+QNX0ddlMF+W9btjYDk82Xu1LkmknnUtbVGySLVSQOwEp8DOlWebbVR
6VxnOhwk0DTh8MyY2KhqKydcSO+Fh4v4ZhN5xqMf0W+m+fNAHK3sTEZ6zo7pkLV4
jLOKKnvfYPUq9NAGqLqSvR9vB3zDqS+ydNlLXMf3bl03FAmQ3skZmh80OpbVKiVH
Jwl30TiZA83r7D5iV+WXR2/7FRKG5Eup7GtJ2uPGKn+JDk4rflVc92WYMrzj7snn
27ZoLB7tHuk6GXjWMcGo
=v75o
-----END PGP SIGNATURE-----